$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft File: QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json) Hash identifier: F6E9v9U0F4tiED5XFSYRZOySj4CzOnuyqL2F1Ovnpf8= Subject key identifier: D4:D8:3B:88:69:8E:82:54:3B:83:DE:5D:92:28:0E:0E:EB:D4:19:C3 Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 074B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft Manifest number: 06CE Signing time: Mon 12 May 2025 22:33:23 +0000 Manifest this update: Mon 12 May 2025 22:33:22 +0000 Manifest next update: Mon 19 May 2025 22:33:22 +0000 Files and hashes: 1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: kDG9WBTEa77QHYha4bhlWJ+LXqpfv1HT8O0eLKHDLfc=) 2: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: escfxy5RlUYE6nP3e3UFCkV/mBHBJ9NVqe623xrfEPc=) 3: BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa (hash: rReeFlN5ADHrOHyJI530NEMlhgLSD72jSettbcydFJU=) 4: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: wT7Gok2ObVdltEihiFf33izm9qdCtxlnOGj2Rw5tT5o=) 5: 03BA8B36824411EF94479387C4F9AE02.roa (hash: ygbiQYnF3YvvMGpAdewGe7ZGRXkNiqf+PspncNjt1Rk=) 6: 5FD09C68393C11EFB8A9065BC4F9AE02.roa (hash: +YUzem1Dht6409gXoGs+oHKgdorYtgcsq8os/J9U2GA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1867 (0x74b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: May 12 22:33:22 2025 GMT Not After : May 19 22:33:22 2025 GMT Subject: CN=68227732-4fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e9:25:8b:15:f1:2a:28:80:4f:16:ef:e9:1c: 34:30:94:c0:09:fa:22:ff:96:09:04:79:d0:a5:fc: 2b:4d:e8:4f:d0:ea:b0:b2:6a:81:9d:d8:81:1c:c2: be:db:f7:bc:ca:70:27:12:6f:c4:2b:69:7c:a6:8e: 74:20:50:75:d9:f6:e1:2d:45:78:80:a5:28:98:0c: f9:87:9c:00:86:b8:f7:34:37:a0:4b:a9:17:88:5e: 1e:ba:ef:fb:e3:c8:fe:cb:18:18:ed:51:63:46:49: 49:63:ef:34:8b:56:34:9b:a6:36:8a:ae:5a:7a:dc: 63:c1:96:20:b1:75:21:76:cf:2b:cc:1e:8d:ec:89: cd:0b:3f:a3:5f:6e:bf:4d:b6:05:d5:bc:2e:8b:0e: 09:cb:94:c9:a5:e8:5f:0e:85:04:a1:e4:cd:a9:38: 6c:72:5e:d0:69:e3:89:83:ff:0c:0a:03:62:52:84: 72:55:99:57:15:34:20:4c:14:53:7c:b1:9e:23:5c: cb:53:1c:55:3d:5c:c6:80:a2:b6:2a:77:3c:a7:95: e0:f1:09:7d:90:91:af:c2:9a:4f:a1:9a:98:ad:71: 14:f8:f1:8b:da:87:d5:25:26:59:bc:a1:47:1f:1a: 17:06:8d:32:14:ca:b1:e2:18:26:af:a8:73:ae:92: 62:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D8:3B:88:69:8E:82:54:3B:83:DE:5D:92:28:0E:0E:EB:D4:19:C3 X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:90:71:a9:93:cc:ce:8f:a9:0b:50:c7:b1:80:9d:e5:3c:1d: e2:6a:7a:4d:71:8c:62:da:3b:8a:06:aa:e7:35:ff:17:5b:9e: ba:f4:b6:ce:c9:0b:df:49:c1:dd:49:01:d4:96:39:a4:1a:98: 50:5f:d5:4e:ef:89:86:04:86:37:59:bf:5a:40:97:7b:27:9b: 0e:fb:4b:08:83:bc:d9:78:3f:3b:84:2d:85:91:7c:1f:fa:1c: c0:6d:8a:f0:0e:0b:11:91:d8:4e:bd:96:68:11:b3:64:e4:59: a0:01:5a:f2:97:3d:55:b6:f3:17:a4:bd:25:81:1e:82:9d:1a: c2:bc:2c:54:dc:d1:1a:8f:f4:de:94:9f:28:e3:51:95:2f:80: 34:cb:c6:36:9c:dd:70:4c:1f:38:eb:9c:6e:cc:e4:62:a9:ac: 15:cd:e9:64:e4:70:d4:b8:2d:7f:20:d7:b4:27:96:94:32:05: 4b:cd:27:6b:dd:e1:7a:94:66:d4:32:30:2f:db:2b:3b:46:07: f7:65:bb:51:b5:ec:7f:8e:09:bf:65:80:6c:fc:f4:12:d0:6d: 1f:10:87:9e:b5:f3:9c:b2:da:0a:7c:7d:15:d4:4d:a1:2f:32: 08:7a:98:56:5d:b8:bf:87:3f:26:78:92:46:d8:85:3f:30:25: 78:f2:7e:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjUwNTEyMjIzMzIyWhcNMjUwNTE5MjIzMzIyWjAYMRYwFAYD VQQDEw02ODIyNzczMi00ZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+klixXxKiiATxbv6Rw0MJTACfoi/5YJBHnQpfwrTehP0OqwsmqBndiBHMK+ 2/e8ynAnEm/EK2l8po50IFB12fbhLUV4gKUomAz5h5wAhrj3NDegS6kXiF4euu/7 48j+yxgY7VFjRklJY+80i1Y0m6Y2iq5aetxjwZYgsXUhds8rzB6N7InNCz+jX26/ TbYF1bwuiw4Jy5TJpehfDoUEoeTNqThscl7QaeOJg/8MCgNiUoRyVZlXFTQgTBRT fLGeI1zLUxxVPVzGgKK2Knc8p5Xg8Ql9kJGvwppPoZqYrXEU+PGL2ofVJSZZvKFH HxoXBo0yFMqx4hgmr6hzrpJiQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTYO4hp joJUO4PeXZIoDg7r1BnDMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q3QS81RERDQ0NDNjk5MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRx QS16OFliRmJwTzhTT1FNM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASkHGpk8zOj6kLUMexgJ3lPB3ianpNcYxi2juKBqrnNf8XW5669LbO yQvfScHdSQHUljmkGphQX9VO74mGBIY3Wb9aQJd7J5sO+0sIg7zZeD87hC2FkXwf +hzAbYrwDgsRkdhOvZZoEbNk5FmgAVrylz1VtvMXpL0lgR6CnRrCvCxU3NEaj/Te lJ8o41GVL4A0y8Y2nN1wTB8465xuzORiqawVzelk5HDUuC1/INe0J5aUMgVLzSdr 3eF6lGbUMjAv2ys7Rgf3ZbtRtex/jgm/ZYBs/PQS0G0fEIeetfOcstoKfH0V1E2h LzIIephWXbi/hz8meJJG2IU/MCV48n4T -----END CERTIFICATE-----Generated at Tue May 13 05:38:04 2025 by rpki-client